Iso 42001 Ai Mcp
io.github.CSOAI-ORGPublished by GitHub account CSOAI-ORGv1.1.11Updated Nov 5, 2026
Iso 42001 Ai MCP Server by MEOK AI Labs
Overview
Local MCP server for ISO 42001 AI management system compliance: AIMS assessment, AI risk management, lifecycle governance and certification readiness.
- What you can do
- Assess an AI management system against ISO 42001 (audit_management_system)
- Assess and manage AI risks (assess_ai_risk)
- Generate policy templates (generate_policy_template)
- Support AI lifecycle governance and certification-readiness work
- When to use it
- Useful when an assistant should help draft or check ISO 42001 AIMS material — management-system audits, AI risk assessments, policy templates and certification preparation — inside a desktop MCP client.
- Requirements
- Runs locally over stdio as a Python package (pip install or uvx). No authentication or environment variables are declared as required; the README describes an optional pay-per-call key (MEOK_PAYG_KEY) and optional rate and receiver settings. Desktop client only.
Installation
In SourceWeft
- Open Iso 42001 Ai Mcp in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
Iso 42001 Ai MCP
⚖️ Built by MEOK AI Labs / CSOAI. Need this applied to your system fast? Book a 30-min Founder Office Hour (£29) → https://meok.ai/work · Full governance platform → https://meok.ai
[MEOK AI Labs] [PAYG enabled] [GSPC] [License] [PyPI]
ISO 42001 AI Management System compliance MCP — AIMS assessment, risk management, AI lifecycle go...
ISO 42001 AI Management System compliance MCP — AIMS assessment, risk management, AI lifecycle governance, certification readiness.
🚀 Quick Start
⚡ Pay-per-call (PAYG) — no subscription
This MCP supports universal pay-per-call billing across the MEOK compliance fleet:
- No subscription — top up once, deduct per call.
- £0.05/call default (configurable via
MEOK_PAYG_RATE_GBP). - USDC on Base L2 accepted — set
MEOK_X402_RECEIVERand pay via stablecoin. - Backward-compatible — when
MEOK_PAYG_KEYis unset, behaviour is unchanged.
Get a token: councilof.ai/payg (£10 / £50 / £200 top-up tiers).
✨ Features
- MCP protocol compliant
- Easy installation
- Well-documented API
- Production-ready
- Active maintenance
📖 Documentation
🛡️ Compliance
This MCP server is built with EU AI Act compliance built-in:
- ✅ Article 9 — Risk Management System
- ✅ Article 13 — Transparency & Instructions for Use
- ✅ Article 15 — Bias Detection & Testing
- ✅ Article 26 — FRIA Support (where applicable)
- ✅ Article 50 — AI Content Watermarking (where applicable)
Need help getting compliant? Book a free 15-min diagnostic →
🏢 Enterprise
Need custom development, SLA guarantees, or white-label deployment?
- Pro: £79/mo — Full MCP suite + EU AI Act tracking
- Enterprise: £499/mo — Custom dev + SLA + Dedicated support
View Pricing → | Contact Sales →
🤝 Part of the MEOK Ecosystem
This server is part of the MEOK AI Labs ecosystem — 26 PyPI packages · ~16,300 monthly installs.
📜 License
MIT © CSOAI-ORG
Built with 💜 by MEOK AI Labs · UK Companies House 16939677
Configuration
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
Or: pip install iso-42001-ai-mcp then run the iso-42001-ai-mcp command (stdio transport).
Examples
Once configured, ask your assistant, for example:
- "Use
audit_management_systemto …" - "Use
assess_ai_riskto …" - "Use
generate_policy_templateto …"
Source: README.md at commit ae1bd87
Tools
0Version history
1- v1.1.11LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts